iceshrimp.net-pre

MEDIUM

maintainer zotan 0 votes scanned 2026-10-27 17:48:24.924245

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:27 "iceshrimp.net::git+https://iceshrimp.dev/iceshrimp/iceshrimp.net.git#tag=${_pkgver}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zotan <aur@zotan.email>
    
      2
    
      3_pkgver=v2026.1.2-beta
    
      4
    
      5pkgname=iceshrimp.net-pre
    
      6pkgver=2026.1.2.beta
    
      7pkgrel=1
    
      8pkgdesc="Decentralized and federated social networking service, implementing the ActivityPub standard"
    
      9arch=(x86_64 aarch64)
    
      10url="https://iceshrimp.dev/iceshrimp/iceshrimp.net"
    
      11license=(EUPL)
    
      12
    
      13makedepends=('dotnet-sdk>=10.0' 'aspnet-targeting-pack>=10.0' 'aspnet-targeting-pack<11.0')
    
      14depends=('aspnet-runtime>=10.0' 'aspnet-runtime<11.0')
    
      15optdepends=(
    
      16  "ffmpeg: for video transcoding"
    
      17)
    
      18
    
      19conflicts=(iceshrimp.net)
    
      20provides=(iceshrimp.net)
    
      21
    
      22backup=("etc/iceshrimp.net/configuration.ini")
    
      23
    
      24install="iceshrimp.net.install"
    
      25
    
      26source=(
    
      27  "iceshrimp.net::git+https://iceshrimp.dev/iceshrimp/iceshrimp.net.git#tag=${_pkgver}"
    
      28  "iceshrimp.net.service"
    
      29  "iceshrimp.net.sysusers"
    
      30  "iceshrimp.net.tmpfiles"
    
      31  "iceshrimp.net.install"
    
      32  "iceshrimp.net.hook"
    
      33)
    
      34
    
      35sha512sums=('c157c04660f4b0dbffd5ed997f984f9310296f7a6344c022035718ee0673297a9a7abf2ba5d4fafb8fe1fe834ca6c807e30cc48b6d177da532cf7a9fe5ded652'
    
      36            'cfb7adf7e9f0d9d05ab89b2237ddf1ef4135ed9dde463e96c7cd94e03e497a85c77a795ac20c09214a2364e675c88e65ac119f6de82a08f5c2d64d657c4b3fc0'
    
      37            '9adf1781842ae7ff2779ca561f06ab2b6fb93e206698084283986627aba69b0fd4482ccbed3daebb2517e5966c326604e1cc57618589f331a966fee2db63815d'
    
      38            '0665aa7af2b2aa4405289ce9119439ddcc6b9e6c81dc8e3b9ed5d8ecdc4a39d49c950d41d3098ce99fe294ce51a2dee55ec7248c1756783b0e9aad0bde4654fa'
    
      39            '0a0467df278f3bd739114725b373f5ec6c7296f609f0a9bcb4f8142b44856fc63e32f76390adf757005035dc691a4c54a662cc8a287572b61e215c29e3d3cbf2'
    
      40            'ee6ed6c0621ae62a7e5de271d02b86c4e3dbd9aa1867081101564823b9c11bda315cc241460f5ca1e0655772fb5a0fa57f6bf1a2ea892a2af601d4ce70401284')
    
      41
    
      42pkgver() {
    
      43  local res
    
      44  res=${_pkgver//-/.} # Replace dashes with dots
    
      45  res=${res:1} # Trim leading 'v'
    
      46
    
      47  echo -n "$res"
    
      48
    
      49  if [[ ${#res} -eq 7 ]]; then
    
      50    echo -n ".0" # Append .0 to major releases to make sure they sort correctly against prereleases
    
      51  fi
    
      52}
    
      53
    
      54rid() {
    
      55  if [[ $CARCH == "x86_64" ]]; then
    
      56    echo -n "linux-x64"
    
      57  else
    
      58    echo -n "linux-arm64"
    
      59  fi
    
      60}
    
      61
    
      62sdkver() {
    
      63  cat "${srcdir}/iceshrimp.net/Directory.Build.props" | grep -oP '(?<=<TargetFramework>).*?(?=</TargetFramework>)'
    
      64}
    
      65
    
      66build() {
    
      67  cd "${srcdir}/iceshrimp.net/Iceshrimp.Backend"
    
      68
    
      69  if [[ -n $DISABLE_VIPS ]]; then
    
      70    VIPS=false
    
      71  else
    
      72    VIPS=true
    
      73  fi
    
      74
    
      75  if [[ -n $DISABLE_AOT ]] || ! dotnet workload list | grep -q '^wasm-tools\s'; then
    
      76    dotnet publish -c Release -r $(rid) -p:EnableLibVips=$VIPS -p:DeterministicSourcePaths=true -p:ContinuousIntegrationBuild=true
    
      77  else
    
      78    dotnet publish -c Release -r $(rid) -p:EnableAOT=true -p:EnableLibVips=$VIPS -p:DeterministicSourcePaths=true -p:ContinuousIntegrationBuild=true
    
      79  fi
    
      80}
    
      81
    
      82package() {
    
      83  # Add runtime-only dependencies
    
      84  depends+=(postgresql)
    
      85
    
      86  if [[ -n $DISABLE_VIPS ]]; then
    
      87    # Add runtime-only dependencies for libvips image processing
    
      88    depends+=(libvips openjpeg2)
    
      89  fi
    
      90
    
      91  install -dm 755 "${pkgdir}/usr/share/iceshrimp.net"
    
      92  install -dm 755 "${pkgdir}/etc/iceshrimp.net"
    
      93
    
      94  install -Dm 644 "${srcdir}/iceshrimp.net/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      95  install -Dm 644 "${srcdir}/iceshrimp.net.service" "${pkgdir}/usr/lib/systemd/system/iceshrimp.net.service"
    
      96  install -Dm 644 "${srcdir}/iceshrimp.net.sysusers" "${pkgdir}/usr/lib/sysusers.d/iceshrimp.net.conf"
    
      97  install -Dm 644 "${srcdir}/iceshrimp.net.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/iceshrimp.net.conf"
    
      98  install -Dm 644 "${srcdir}/iceshrimp.net.hook" "${pkgdir}/usr/share/libalpm/hooks/iceshrimp.net.hook"
    
      99  install -Dm 640 "${srcdir}/iceshrimp.net/Iceshrimp.Backend/configuration.ini" "${pkgdir}/etc/iceshrimp.net/configuration.ini"
    
      100
    
      101  cp -dpTr --no-preserve=ownership "${srcdir}/iceshrimp.net/Iceshrimp.Backend/bin/Release/$(sdkver)/$(rid)/publish/" "${pkgdir}/usr/share/iceshrimp.net"
    
      102}
    
      103

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-27 17:48
@@ -1,9 +1,9 @@
 # Maintainer: zotan <aur@zotan.email>
 
-_pkgver=v2026.1.1-beta
+_pkgver=v2026.1.2-beta
 
 pkgname=iceshrimp.net-pre
-pkgver=2026.1.1.beta
+pkgver=2026.1.2.beta
 pkgrel=1
 pkgdesc="Decentralized and federated social networking service, implementing the ActivityPub standard"
 arch=(x86_64 aarch64)
@@ -32,7 +32,7 @@
   "iceshrimp.net.hook"
 )
 
-sha512sums=('26ae31b72e2744f067cafe3f12a3122dd34d73c0f238569c8ab0484ac988e6935210d0713d3c0bc0e2685c46bdce6bec116db38b7abc4b7ced55b9c3cf7b1a49'
+sha512sums=('c157c04660f4b0dbffd5ed997f984f9310296f7a6344c022035718ee0673297a9a7abf2ba5d4fafb8fe1fe834ca6c807e30cc48b6d177da532cf7a9fe5ded652'
             'cfb7adf7e9f0d9d05ab89b2237ddf1ef4135ed9dde463e96c7cd94e03e497a85c77a795ac20c09214a2364e675c88e65ac119f6de82a08f5c2d64d657c4b3fc0'
             '9adf1781842ae7ff2779ca561f06ab2b6fb93e206698084283986627aba69b0fd4482ccbed3daebb2517e5966c326604e1cc57618589f331a966fee2db63815d'
             '0665aa7af2b2aa4405289ce9119439ddcc6b9e6c81dc8e3b9ed5d8ecdc4a39d49c950d41d3098ce99fe294ce51a2dee55ec7248c1756783b0e9aad0bde4654fa'

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 17:48:24	Medium	1
2026-07-31 00:14:10	Clean	2
2026-07-30 17:15:21	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1